389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks during account lockout due to different return codes returned on password attempts...
9.8CVSS6.8AI score0.01418EPSS
SaveExploits1References3
OSV•added 2014/08/21 2:55 p.m.•7 views
CVE-2014-3562
Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory...
